This Privacy Policy (the “Policy”) explains how MeantToBe, Inc., a Delaware Corporation (“Company”, “We”, “Us” or “Our”) applies its privacy practices to how we collect, process, and/or use information that we receive via ‘Rivet’ mobile application and website or the services we provide (collectively, “Platform” or “Services” or “Rivet”). Reading this Policy will help you understand your privacy rights and choices. We will not use or share your information with anyone except as described in this Policy. If you do not agree with our policies and practices, please do not use Rivet.

This Policy describes the processing of information provided or collected on Rivet where this Policy is posted. We follow this Policy in accordance with applicable law in the places where we operate. In some cases, we may provide additional data privacy notices specific to certain products, practices, or regions (“Additional Privacy Notices”). Those terms are to be read in conjunction with this policy. The terms of this Policy along with Additional Privacy Notices shall be read in conjunction with the Terms of Use and if you see an undefined term in this Privacy Policy, it has the same definition as in our Terms of Use.

Please keep in mind that when you provide information to us on a third-party site or platform, the information you provide may be separately collected by the third-party site or platform. The information we collect is covered by this Policy, and the information the third-party site or platform collects is subject to the third-party site or platform’s privacy practices. Privacy choices you have made on the third-party site or platform will not apply to our use of the information we have collected directly through our applications.

Please also keep in mind that our Platform may contain links to other sites not owned or controlled by us and we are not responsible for the privacy practices of those sites. We encourage you to be aware when you leave our sites or applications and to read the privacy policies of other sites that may collect your personal information. For purposes of this Policy, “Personal Information” means information that identifies (directly or indirectly) a particular individual, such as the individual’s name, address, email address, and telephone number. Information that results from anonymous information that is directly or indirectly associated with personal information is also treated as personal information. Personal information containing any biometric data, or geolocation or gender related information that may be shared with us shall be categorized as “Sensitive Information”.

1. INFORMATION WE COLLECT

1.1. Registration and Profile Information

1.2. Selfie Verification Information

1.3. Payment and Payout Information

1.4. Geolocation Information

1.5. Device, Photos and Derived Information

1.6. Links

We may keep track of how you interact with links available on our Platform including third party services by redirecting clicks or through other means. We may share aggregate click statistics such as how many times a particular link was clicked on.

1.7. Surveys and other Contributions

From time to time, we run surveys for research purposes and we may contact you to find out if you would like to take part. We may also contact you to find out if you would like to provide feedback, a testimonial or take part in marketing campaigns. Such surveys and marketing campaigns are optional and more information will be provided at the point of contact.

1.8. When you Contact Customer Support

If you contact our Customer Support team, we will receive your email address, and may track your IP address, as well as the information you send to us to help resolve your query. We will keep records of our communications with you, including any complaints that we receive from you about other Users (and from other Users about you) for 6 years after deletion of your account.

1.9. Cookies and similar technologies

When you visit our Platform, we may collect personal data from you automatically by using cookies or similar technologies. A cookie is a small file that can be placed on your device or browser that allows us to recognize and remember you. Further details with respect to use of Cookie and similar Technologies is provided below.

1.10. Content and Usage Information

1.11. Data from Third Parties (Safety/Fraud)

We may receive information from service providers, affiliates, or industry partners about suspected bad actors to protect users and the Platform.

2. HOW WE COLLECT YOUR INFORMATION

2.1. We collect information you provide to us when you (i) register yourself to use our Platform; (ii) purchase or redeem Virtual Items; (iii) participate in public forums or other activities on our Platform, including when interacting with the various profiles, respond to surveys, or otherwise interacting with us using one or more devices. You may provide information in a variety of ways, including by typing or using voice commands.

2.2. We collect information through a variety of technologies, such as cookies, Flash cookies, pixels, tags, software development kits, application program interfaces operated by us or on our behalf that may be displayed online (including those operated by third parties which permits us to interact directly with our guests and users) and Web beacons, including when you visit our sites and applications or use our applications on third-party sites or platforms using one or more devices, whether or not you are logged in or registered. Please see the below section titled “Online Tracking Technologies and Advertising” for further information, including ‘Do Not Track’ and how to disable cookies and otherwise make choices with respect to such data collection.

2.3. We collect information using analytics tools, including when you visit our sites and applications or use our applications on third-party sites or platforms.

2.4. We acquire information from other trusted sources to update or supplement the information you provided or we collected automatically, such as when we validate postal address information using third party services through your enrollment in our Services via your school. Applicable law may require that you authorize the third party to share your information with us before we can acquire it.

3. ONLINE TRACKING TECHNOLOGIES AND ADVERTISING

3.1. Online Tracking Technologies: We and certain service providers operating on our behalf collect information about your activity, or activity on devices associated with you, on our sites and applications using tracking technologies such as cookies, Flash cookies, pixels, tags, software development kits, application program interfaces, and Web beacons. Definitions for some of the tracking technologies listed, as well as information about your choices with respect to them, are available below. This tracking data may be used for many purposes including, for example, to:

3.2. We may collect information whether or not you are logged in or registered and may associate this tracking data with your registration account (if you have one), in which case we will treat it as personal information. Service providers that collect tracking data on our behalf may provide an opportunity for you to choose not to be tracked online.

3.3. Examples of online tracking technologies include:

3.3.1. Cookies: Cookies are pieces of information that a website places on the hard drive of your computer when you visit the website. Cookies may involve the transmission of information from us to you and from you directly to us, to another party on our behalf, or to another party in accordance with its privacy policy. We may use cookies to bring together information we collect about you. You can choose to have your computer warn you each time a cookie is being placed on your device, or you can choose to block all cookies. You do this through your browser settings. Each browser is a little different, so look at your browser Help menu to learn the correct way to modify your cookies. If you turn cookies off, you won’t have access to many features that make your guest experience more efficient, and some of our services will not function properly.

3.3.2. Web beacons and marketing pixels: Web beacons and marketing pixels are small pieces of data that are embedded in images on the pages of sites. They may involve the transmission of information directly to us, to another party on our behalf, or to another party in accordance with its privacy policy. We may use web beacons or marketing pixels to bring together information we collect about you.

3.4. Do Not Track: You may choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences.

3.5. Advertising: Advertisers and third parties also may collect information about your activity on our sites and applications, on devices associated with you, and on third-party sites and applications using tracking technologies. Tracking data collected by these advertisers and third parties is used to decide which ads you see both on our sites and applications and on third-party sites and applications.

3.5.1. Some states provide residents or, in some cases, their authorized agents, with the right to opt out of the “selling” or “sharing” of their “personal information”, or of “targeted advertising” based on their “personal information.” To submit a request to opt out please email us at support@rivetdating.com with the title of such email “Do Not Sell or Share My Personal Information”. Please note that your opt-out choice is specific to the digital property and to the device and browser you are using. If you clear your cookies on your browser or use another browser or device, you may need to opt out again.

3.5.2. You may also choose to opt out of targeted advertising directly with many ad networks and partners, data exchanges, and marketing analytics and other digital advertising and marketing service providers. You may also be able to choose to control targeted advertising on other websites and platforms that you visit. In addition, you may choose to control targeted advertising you receive within applications by using the settings and controls on your devices (for example, by re-setting your mobile device’s advertising identifier and/or opting out of interest-based ads). We adhere to the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioral Advertising.

4. USE OF YOUR INFORMATION

We (or our affiliates) may access your information where they perform services on behalf of the data controllers of Rivet (as data processors) and, unless prohibited under applicable law, for use on their own behalf (as data controllers) for the purposes described in this policy. Consistent with applicable law and choices and controls that may be available to you, we may use information collected from you, or from devices associated with you, to:

4.1. Provide you with the experiences, products, and Services you request, view, engage with, or subscribe to;

4.2. Communicate with you about your account or transactions with us and send you information or request feedback about features on our Platform or changes to our policies;

4.3. Send you offers and promotions for our Services or any third-party products and services;

4.4. Personalize content and experiences;

4.5. Operate, understand, optimize, develop, or improve our Platform, Services and operations, including by using guest survey research and analytics tools; and

4.6. Detect, investigate and prevent activities that may violate our policies, pose safety issues, or be fraudulent or illegal.

5. SHARING OF YOUR INFORMATION

We may share your personal information with a third party outside of Rivet or its affiliated entities in limited circumstances, including but not limited to:

5.1. When you register for the Services via a third-party;

5.2. When you may direct us to share your personal information with another company to fulfill your request.

5.3. When you direct us to share your personal information with third-party sites or platforms, such as social networking sites.

5.4. Please note that once we share your personal information with another company in the above circumstances, the information received by the other company is controlled by that company and becomes subject to the other company’s privacy practices.

5.5. When companies perform services on our behalf, like marketing and advertising, and customer service; however, these companies are prohibited from using your personal information for purposes other than those requested by us or required by law; and

5.6. When we share your personal information with third parties in connection with the sale of a business, to enforce our Terms of Use or rules, to ensure the safety and security of our users and third parties, to protect our rights and property and the rights and property of our users and third parties, to comply with legal process, or in other cases if we believe in good faith that disclosure is required by law.

6. YOUR CONTROL OF YOUR INFORMATION

7. PRIVACY POLICY REGARDING MINORS

We recognize the need to provide further privacy protections with respect to personal information we may collect from individuals who we have identified are not of legal age to consent to the collection and processing of their personal information, specifically those under the age of 13, on our Platform. It is clarified that the Platform is not intended to be utilized by any Users under the age of 18 (“Minor Users”). We do not intend to collect personal information from Minor Users, and the following additional steps shall be followed to Minor Users’ Privacy. We follow the regulations as have been prescribed under the Children’s Online Privacy Protection Act of 1998 and its rules (collectively, "COPPA") require us to inform parents and legal guardians “Parents”). In the event we find out that a particular User is considered as a Minor User, then, we will (i) immediately suspend such account; (ii) inform the Parents of such Minor Users; and (iii) delete any information, personal or otherwise that may have been provided by such Minor Users. We do not share, sell, rent, or transfer children's personal information other than as described in this section.

8. DISCLOSURE OF INFORMATION

We disclose personal information to:

8.1. Other Users: What you share in your profile or messages is visible consistent with your choices and Service functionality; use caution.

8.2. Service Providers and Vendors: Hosting, analytics, security, moderation, communications, identity verification, payment processing, marketing/advertising, customer support, and related vendors under contractual safeguards.

8.3. Advertising and Marketing Partners: We may share identifiers (e.g., hashed emails, device IDs), demographic and usage data to create/exclude ad audiences, measure campaigns, and deliver targeted ads; this may be deemed a “sale” or “sharing” under certain state laws; opt-out rights are provided below.

8.4. Affiliates/Corporate Group: Within our corporate family for safety, security, infrastructure, analytics, cross-app fraud prevention, and support.

8.5. Law Enforcement/Legal: To comply with law or valid legal requests; to protect users, our Services, or third parties; or to enforce our terms.

8.6. Business Transfers: In connection with mergers, acquisitions, financing, reorganization, bankruptcy, or sale of business/assets.

8.7. Anti‑Spam/Fraud and Aggregates: Select data among affiliates for anti‑fraud; aggregated/de-identified data for insights that do not identify individuals.

9. AUTOMATIC INFORMATION COLLECTING AND TRACKING

10. DATA SECURITY AND RETENTION

11. INTERNATIONAL DATA TRANSFER, PROCESSING, AND STORAGE

We operate globally and will transfer your personal information to third parties in locations around the world for the purposes described in this privacy policy. Wherever your personal information is transferred, stored or processed by us, we will take reasonable steps to safeguard the privacy of your personal information. These steps may include implementing standard contractual clauses where recognized by law, obtaining your consent, or other lawful means of transferring personal information.

12. AI AND AUTOMATED DECISION-MAKING NOTICE

12.1. Where we use AI/automated systems: We use automated tools and models to undertake profile making, support matching recommendations, safety moderation (including content and behavior analysis), fraud/spam detection, and product analytics. These systems may analyze profiles, usage signals, limited message metadata, and safety reports to prioritize review and improve relevance and safety. Human moderators review edge cases and appeals.

12.2. Significant effects and your options: If an automated action significantly affects you (e.g., access restriction), you may request human review and provide context via support at the e-mail id provided at the end of this Policy; we will assess and, where appropriate, adjust the outcome. You may opt out of targeted advertising profiles as described in State Rights.

12.3. Model inputs/outputs: We do not sell message content to third parties, and we do not permit third parties to use your content to train their independent models for their own purposes. Internal models are used to operate and improve the Services and safety.

13. YOUR RESPONSIBILITIES

13.1. Use caution when sharing information on profiles or messages. Avoid posting contact details, financial information, government IDs, or other sensitive data publicly. Report suspicious users or conduct via in‑app tools.

13.2. We implement appropriate technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure (e.g., encryption in transit where applicable, access controls, monitoring). No system is 100% secure. Keep your credentials confidential and contact us immediately if you suspect unauthorized access.

14. CHANGES AND UPDATES TO THIS PRIVACY POLICY

From time to time, we may change this privacy policy to accommodate new technologies, industry practices, regulatory requirements or for other purposes. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. If we make material changes to this Privacy Policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. Notice may be by email to you at the last email address you provided us, by posting notice of such changes on our sites and applications, or by other means, consistent with applicable law. Where required by applicable law, we will obtain your consent. We encourage you to review this Privacy Policy frequently to be informed of how we are protecting your information.

15. CONTACT

Supplemental Notices Follow

---

US RESIDENTS’ PRIVACY RIGHTS

As a US resident, you have certain additional privacy rights as detailed below which provide additional information relevant to residents of certain states that have their own laws regarding data privacy. The below supplements our privacy policy.

CALIFORNIA PRIVACY RIGHTS

This notice to California residents is provided under California law, specifically under CCPA/CPRA. It explains your privacy rights, provides our “notice at collection,” and provides certain mandated disclosures about our treatment of California residents’ information, both online and offline.

NOTICE OF COLLECTION OF PERSONAL INFORMATION

We may collect the following categories of personal information about users of our digital properties: identifiers/contact information, demographic information (such as gender and age), payment card information associated with you, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above.

We collect this information so that we can best serve you, including to fulfill your requests and to share offers that we think you may be interested in. A more detailed description of these purposes is in our Privacy Policy under “Use of Your Information.”

Disclosures/Sharing/Selling

California residents also have the right to “opt out” of the “sale” or “sharing” of their “personal information” to or with “third parties” (as those terms are defined under law).

Based on the broad definition of the term “sale,” under CCPA/CPRA certain data collection on our sites and applications by third parties for purposes of social media tools may be a “sale” under the CCPA/CPRA. To opt out, please email us at support@rivetdating.com to opt out (with the subject line “Do not sell info”), including if you are an authorized agent for a California resident.

You may be directed to this page where you can learn more about your choices and how to opt out from interest-based advertising more broadly and to opt out from certain social media and audience measurement tracking. To exercise these choices, please follow the instructions below.

• If you are an authorized agent making a CCPA/CPRA request on behalf of a California consumer, please email us at support@rivetdating.com to submit the request.

INTEREST-BASED ADVERTISING

We and third parties collect information about your online activity on devices associated with you to provide you with personalized (or interest-based) advertising online.

How to Opt Out

• You can adjust your device settings to opt out of interest-based advertising.
• You can use the Digital Advertising Alliance’s consumer choice tool to opt out of interest-based advertising.
• Please note, given current technology constraints, to opt out on mobile applications and connected devices (like smart TVs or streaming devices), please select the device settings option that allows you to disable ad tracking. To opt out, these devices typically require you to select options like “limit ad tracking” or to disable options such as “interest-based advertising,” “interactive TV,” or “smart interactivity.” These settings vary by device type.

Practical Tip: These opt out tools are limited to the device and web browser you use to opt out because they work off of your device ID or browser ID. If you use another device or browser, you will need to opt out on each device and browser. If you block or clear cookies from your browser, it may remove the opt out setting, requiring you to opt out again.

SOCIAL MEDIA

We and our social media partners collect information about your online activity when you interact with our sites and applications

How to Opt Out

To opt out of social media site ad tracking and analytics, you can use your browser controls to opt out or the specific settings on such social media platforms.

“DO NOT SELL OR SHARE MY PERSONAL INFORMATION” RIGHTS

You or your authorized agent can opt out of the “sale” or “sharing” of your personal information to third parties.

Certain data collection on our sites and applications for purposes of interest-based advertising and social media tools may be a “sale” or “sharing” under California privacy law. Instructions for how you can exercise these rights are set forth below in the “California Residents’ Rights” section.

CALIFORNIA RESIDENTS’ RIGHTS

• Right to Access: You have the right to request, up to two times each year, access to categories and specific pieces of personal information about you that we collect, use, disclose, sell, and share.
• Right to Delete: You have the right to request that we delete personal information that we collect from you, subject to applicable legal exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information that we maintain about you, subject to applicable legal exceptions.
• Right to Opt Out of Sale or Sharing of Personal Information: You have the right to “opt out” of the “sale” or “sharing” of your “personal information” to or with “third parties” (as those terms are defined by applicable law).

EXERCISING YOUR CALIFORNIA PRIVACY RIGHTS

Making Access, Deletion, and Correction Requests: To make an access, deletion, or correction request, please contact us at support@rivetdating.com. Before completing your request, we may need to verify your identity. We will send you a link to verify your email address and may request additional documentation or information solely for the purpose of verifying your identity.

Instructions for Authorized Agents Making Requests: You may also use an authorized agent to submit an access, deletion, or correction request on your behalf. Authorized agents may submit such requests to us via email at support@rivetdating.com. An authorized agent must have your signed permission to submit a request on your behalf or provide proof that they have power of attorney in accordance with California probate law. Before completing requests from authorized agents, we may contact you directly to confirm you’ve given your permission and/or to verify your identity.

Making Requests to “Opt Out” of the “Sale” or “Sharing” of “Personal Information”: To submit a request to opt out of the sale or sharing of your personal information, email us with the email title “Do Not Sell or Share My Personal Information” or you may choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences. You may also use an authorized agent to submit a request to opt out on your behalf if you provide the authorized agent signed written permission to do so. Authorized agents may submit requests to opt out by emailing us at support@rivetdating.com. You have the right not to receive discriminatory treatment for the exercise of your privacy rights.

CALIFORNIA MANDATORY DISCLOSURES

We also make the following disclosures for purposes of compliance with California privacy law:

• We collected or will collect the following categories of personal information: identifiers/contact information, demographic information (such as gender and age), payment card information associated with you, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above.
• The sources of personal information from whom we collected are: directly from our users, third-party sites or platforms that you link with your registration account, analytics tools, social networks, advertising networks, and third-party services that update or supplement information we hold about you.
• The business or commercial purposes of collecting personal information are as summarized above and in our Privacy Policy under “Use or Your Information.”
• If required, We will disclose the following categories of personal information for a business purpose: identifiers/contact information, demographic information (such as gender and age), payment card information associated with you, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above. We disclosed each category to third-party business partners and service providers, third-party sites or platforms such as social networking sites, and other third parties as described in the “Sharing Your Information” section of our Privacy Policy.
• The business or commercial purpose of “selling” or “sharing” personal information is to assist us with marketing, advertising, and audience measurement.
• We do not “sell” or “share” the personal information of known minors under 16 years of age.

Shine the Light Act

If you are a California resident, California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your personal information by Rivet to third parties for the third parties’ direct marketing purposes. Pursuant to California Civil Code Section 1798.83(c)(2), Rivet does not share users’ personal information with others outside Rivet for those parties’ direct marketing use unless a user elects that we do so.

Removal of Content

If you are a California resident under the age of 18, and a registered user of any site where this policy is posted, California Business and Professions Code Section 22581 permits you to request and obtain removal of content or information you have publicly posted.

To make such a request, please send an email with a detailed description of the specific content or information to support@rivetdating.com. Please be aware that such a request does not ensure complete or comprehensive removal of the content or information you have posted and that there may be circumstances in which the law does not require or allow removal even if requested.

CONTACT INFORMATION

If you have a question about our privacy policies, please send an email to support@rivetdating.com or write to us at: 99 Wall Street #2355, New York, NY 10005.

---

VIRGINIA RESIDENTS’ RIGHTS

Virginia law provides Virginia residents with the rights listed below.

• Right to Access: You have the right to confirm whether we are processing your personal data and to access your personal data.
• Right to Correct: You have the right to correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of the processing.
• Right to Delete: You have the right to delete personal data provided by or obtained about you.
• Right to Portability: You have the right to obtain a portable copy of the personal data that you provided to us.
• Right to Opt Out: You have the right to opt out of targeted advertising (as defined under Virginia law). We do not sell data as defined under Virginia law.

EXERCISING YOUR VIRGINIA PRIVACY RIGHTS

Making Access, Deletion, and Correction Requests: To make an access, deletion, or correction request, please email us at support@rivetdating.com. Before completing your request, we may need to verify your identity. We will send you a link to verify your email address and may request additional documentation or information solely for the purpose of verifying your identity.

Making Requests to “Opt Out” of Targeted Advertising: To submit a request to opt out of targeted advertising, you may email us at support@rivetdating.com with an email titled “Do Not Sell or Share My Personal Information” or you may choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences, such as the Global Privacy Control (“GPC”). We will process the GPC signal as a request to opt out.

To appeal our decision regarding a request related to these rights, you may email us at support@rivetdating.com.

VIRGINIA MANDATORY DISCLOSURES

We also make the following disclosures for purposes of compliance with Virginia privacy law:

• We process the following categories of personal data: identifiers/contact information, demographic information (such as gender and age), payment card information associated with you, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above.
• The purposes for processing personal data are described in our Privacy Policy under “Use of Your Information.”
• We may disclose the following categories of personal data to third parties: identifiers/contact information, demographic information (such as gender and age), payment card information associated with you, commercial information, Internet or other electronic network activity information, geolocation data, audio, electronic, visual or similar information, and inferences drawn from the above. We share each category with third-party business partners and service providers, third-party sites or platforms such as social networking sites, and other third parties as described in the “Sharing Your Information” section of our privacy policy.
• We process the following categories of personal data for targeted advertising: identifiers/contact information, Internet or other electronic network activity information, and inferences drawn from the above. We share each category with advertising networks, data analytics providers, and social networks.

---

CONNECTICUT RESIDENTS RIGHTS

This notice describes how we collect, use, and share your personal data under Connecticut’s Data Protection Act (“CTDPA”) and the rights that you have with respect to your personal data, including sensitive personal data. For purposes of this section, “personal data” and “sensitive data” have the meaning given in the CTDPA and do not include information excluded from the CTDPA’s scope. This notice is applicable to you if you are a Connecticut Resident.

The personal data (as described in this Privacy Policy) and how we collect and use is described here in this Privacy Policy. To the extent that we collect personal data subject to the CTDPA, that information, our practices, and your rights are described below.

You have the right to request access to Personal Data collected about you and information regarding the purposes for which we collect it and the third parties and service providers with which we share it. Additionally, you have the right to correct inaccurate or incomplete Personal Data. You may submit such a request as described below.

• Right to Deletion of Personal Data: You have the right to request in certain circumstances that we delete any Personal Data that we have collected directly from you or from a third party. You may submit such a request as described below. We may have a reason under the law why we do not have to comply with your request or why we may comply in a more limited way than you anticipated. If we do, we will explain that to you in our response.
• Right to Opt Out of Sale of Personal Data to Third Parties: You have the right to opt out of any sale of your Personal Data to third parties by sending us an e-mail for the same.
• Right to Obtain a Copy of Personal Data: You have the right to request a copy of the Personal Data that you previously provided to us as controller in a portable format. Our collection, use, disclosure, and sale of Personal Data is described in our Privacy Policy.
• Right to Opt Out of Targeted Advertising: You have the right to opt out of Targeted Advertising based on your Personal Data obtained from your activities.
• Right to Opt Out of Profiling: You have the right to opt out of having your personal data processed for the purpose of profiling in the furtherance of decisions that produce legal or similarly significant effects concerning you.
• Right to Appeal: If we decline to take action in any request that you submit in connection with the rights described in the above sections, you may ask that we reconsider our response by sending an email to the same email box (referenced in section below) from which you receive the decision. You must ask us to reconsider our decision within 45 days after we send you our decision.

EXERCISING YOUR CONNECTICUT PRIVACY RIGHTS

Making Access, Deletion, and Correction Requests: To make an access, deletion, or correction request, please contact us at support@rivetdating.com. Before completing your request, we may need to verify your identity. We will send you a link to verify your email address and may request additional documentation or information solely for the purpose of verifying your identity.

Instructions for Authorized Agents Making Requests: You may also use an authorized agent to submit an access, deletion, or correction request on your behalf. Authorized agents may submit such requests to us via email at support@rivetdating.com. An authorized agent must have your signed permission to submit a request on your behalf or provide proof that they have power of attorney in accordance with applicable probate law. Before completing requests from authorized agents, we may contact you directly to confirm you’ve given your permission and/or to verify your identity.

Making Requests to “Opt Out” of the “Sale” or “Sharing” of “Personal Information”: To submit a request to opt out of the sale or sharing of your personal information, email us with the email title “Do Not Sell or Share My Personal Information” or you may choose to enable online, where available, a universal tool that automatically communicates your opt-out preferences. You may also use an authorized agent to submit a request to opt out on your behalf if you provide the authorized agent signed written permission to do so. Authorized agents may submit requests to opt out by emailing us at support@rivetdating.com. You have the right not to receive discriminatory treatment for the exercise of your privacy rights.

ONLINE DATING SAFETY CENTER

Pursuant to the amendments in the CTDPA, please see our online dating safety tips. Please follow these to make sure that your experience on our Platform is safe.

---

FOR WASHINGTON OR NEVADA RESIDENT

If you are a Washington or a Nevada Resident please see below our Consumer Health Data Privacy Policy, which supplements this Privacy Policy.

Collection and Use of Consumer Health Data

We do not believe we collect “consumer health data,” and we do not use data we collect to identify or make inferences about your past, present, or future physical or mental health status. Because “consumer health data” is defined so broadly in some jurisdictions, however, the information we may collect from or about you from time to time may be considered “consumer health data” under laws in those jurisdictions. Like other data we collect, the main reason we use this information is to provide our service to you and help you connect with other members.

How We Disclose Consumer Health Data

We may share consumer health data with the following categories of third parties when necessary for the purposes described above:

• Other users: You share information with other users when you voluntarily disclose information on the service for others to see (e.g., your public profile).
• Service providers: We share information with vendors who help us operate our Service. They provide us services such as data hosting and maintenance, customer care, and security operations.
• Affiliates: We may share information with affiliates who assist us in data processing operations, as service providers. This assistance may include processing operations, such as data hosting and maintenance, customer care, data security and fighting against spam, abuse, fraud and other wrongdoings.
• Parties to a corporate transaction: We may disclose your information if we are involved, whether in whole or in part, in a merger, sale, acquisition, divestiture, restructuring, reorganization, dissolution, bankruptcy or other change of ownership or control.
• Law enforcement authorities / Legal Processes: We may disclose your data to: (i) comply with a legal process, such as a court order, subpoena or search warrant, government / law enforcement investigation or other legal requirements; (ii) assist in the prevention or detection of crime; (iii) protect the safety of any person; and (iv) establish, exercise or defend legal claims.

Your Rights

You can exercise your privacy rights under applicable law by submitting a request to us at support@rivetdating.com.

---

FOR OTHER STATES

Certain U.S. states have enacted consumer privacy laws that give their residents specific rights regarding their personal information (including, for example, Colorado, Delaware, Indiana, Iowa, Montana, New Jersey, Oregon, Tennessee, Texas, Utah, and any other U.S. state that adopts similar laws in the future). These laws may provide you with some or all of the following rights, subject to applicable scope, exceptions, and verification requirements:

1. Right to Know/Access: To request confirmation of whether we process your personal information and to access that information, including, in some states, specific pieces of personal information we hold about you.
2. Right to Delete: To request that we delete personal information we collected from you, subject to exceptions (for example, where we must retain data for security, fraud prevention, legal compliance, or internal recordkeeping).
3. Right to Correct/Rectify: To request that we correct inaccuracies in your personal information, taking into account the nature of the information and the purposes of the processing.
4. Right to Data Portability: To obtain a copy of certain personal information in a portable and, where technically feasible, readily usable format that allows you to transmit the data to another entity.
5. Right to Opt Out of “Sale,” “Sharing,” or Targeted Advertising: To direct us not to: (a) “sell” your personal information; (b) “share” it for cross‑context behavioral advertising; or (c) use it for targeted advertising, as those terms are defined under applicable state law. We provide these opt‑out mechanisms via our “Do Not Sell or Share My Personal Information” / “Your Privacy Choices” links, in‑app settings, and by honoring recognized browser or device opt‑out signals where required by law.
6. Right to Restrict/Limit Use of Sensitive Personal Information: In some states, to limit our use and disclosure of certain “sensitive” personal information (such as precise geolocation or biometric identifiers) to what is necessary to provide the services and for other permitted purposes.
7. Right to Object to or Restrict Certain Processing, Including Profiling: In some states, to object to or request restriction of processing for certain purposes, including profiling in furtherance of decisions that produce legal or similarly significant effects, and to request human review of such decisions where required.
8. Right to Non‑Discrimination: We will not discriminate against you for exercising any of your privacy rights, such as by denying services, charging different prices, or providing a different level or quality of services, except as permitted by law (for example, loyalty or rewards programs).
9. Right to Appeal: In states that provide this right, if we deny your privacy request, you may appeal our decision within the period specified in our response; if you remain unsatisfied after our appeal decision, you may be able to contact your state Attorney General or regulator.

You may also use an authorized agent to submit an access, deletion, or correction request on your behalf. Authorized agents may submit such requests to us via email at support@rivetdating.com. An authorized agent must have your signed permission to submit a request on your behalf or provide proof that they have power of attorney in accordance with applicable law. Before completing requests from authorized agents, we may contact you directly to confirm you’ve given your permission and/or to verify your identity. Where we rely on your consent for specific processing (such as certain marketing, sensitive data, or location uses), you may withdraw that consent at any time through your settings or by contacting us; doing so will not affect the lawfulness of processing prior to withdrawal.

To the extent we are not already legally required to provide some or all of the rights described above to you under your state’s law, we may, in our discretion, choose to voluntarily honor such requests in order to provide a consistent privacy experience for our users in the United States.

---